Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa
File:                     42c12548-573e-318e-87a2-6e11bf3c9261.roa (raw, json)
Hash identifier:          6KoNlcUomrZeYQzmEncKgVQ9+7ZvmsqL0g0ZrIfg/Yo=
Subject key identifier:   5E:E2:D0:CB:28:C0:8C:0F:9C:96:56:97:E5:19:6C:80:60:20:46:CD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A6DBB5264A9F7685D0E6F4C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     41264
IP address blocks:        104.132.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:52:64:a9:f7:68:5d:0e:6f:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=7b35f41c-345e-4796-b12e-f0e35278d606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:fd:33:4a:2b:a9:aa:a8:b7:79:3a:27:f8:
                    97:45:fe:b3:38:c0:d5:c6:2a:ea:58:5b:5b:e0:4a:
                    ce:04:31:f8:b5:67:18:7c:c6:a3:d9:01:6b:34:c9:
                    fe:72:b3:84:32:bc:d7:00:3b:52:a2:ea:94:5d:6b:
                    61:3a:1f:86:52:72:54:01:1a:30:4f:f0:37:f1:51:
                    66:a0:d7:9c:85:bf:43:4a:e9:7f:e4:4b:df:d8:5e:
                    3b:c6:42:4e:16:7c:9a:56:31:70:a5:ee:94:26:8a:
                    fe:06:c1:1b:f2:3e:88:07:8c:5b:f5:fb:4f:97:c0:
                    87:c7:63:4e:53:25:b1:1c:03:ad:cf:bb:15:9e:00:
                    24:f5:c8:70:07:f0:58:ff:07:d0:c6:65:71:77:cb:
                    6c:4b:62:9d:fd:bc:1a:44:12:80:74:5f:f7:57:c0:
                    b9:71:72:8f:c7:0d:75:03:37:8f:43:e5:2e:0d:2e:
                    63:c1:c8:9d:90:59:ce:d2:cc:73:de:cc:e9:dc:85:
                    44:2a:26:7d:d4:fd:9a:10:48:c7:da:d6:ea:b1:ee:
                    82:f5:86:ca:87:6f:62:4f:5c:69:92:0b:d4:1e:10:
                    ce:39:9d:12:9a:0a:b8:a8:8e:91:97:28:d0:c4:88:
                    d6:df:5a:b4:18:02:c5:da:00:1a:d3:26:11:35:ee:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E2:D0:CB:28:C0:8C:0F:9C:96:56:97:E5:19:6C:80:60:20:46:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:26:d5:ec:86:38:f2:25:c4:14:d0:7b:c7:f6:3f:22:32:87:
         03:8f:8e:25:06:35:96:48:5c:86:cb:ea:fa:c8:b6:e2:ea:89:
         a0:36:1e:eb:cd:1d:ae:8e:8a:87:d8:e7:94:dc:73:5e:01:b9:
         e3:aa:4e:02:40:bc:67:29:de:be:95:d5:57:0f:aa:d8:44:28:
         d9:d8:98:0d:94:3a:0a:36:90:07:0b:d8:84:26:ed:c6:75:cf:
         2e:0f:fe:87:40:fc:d4:f0:a0:64:e0:6a:03:4f:39:15:6e:8b:
         78:1e:c2:67:0a:72:cb:29:d2:0f:83:15:7d:b9:f1:b3:d9:7a:
         5b:89:10:81:58:95:e4:80:1d:52:19:11:20:0a:a8:3f:fd:ec:
         8e:d2:55:2b:ce:58:07:1a:e6:41:a5:2d:d8:07:d2:cc:1e:94:
         c0:9d:7a:fd:3a:32:7f:dd:4d:a1:d6:b9:cd:c0:39:c5:02:90:
         70:38:c9:5e:08:f1:05:1b:0f:44:e4:6a:86:b6:e2:3c:1c:1d:
         49:0d:35:ad:d3:b7:d3:35:76:5f:26:85:ff:a3:b9:89:f5:ab:
         31:59:d8:bb:70:83:f5:aa:5b:a1:9e:06:19:ea:7e:79:2d:61:
         53:6d:35:47:92:d3:fc:4d:2e:4c:a2:89:0d:05:25:8c:7d:8f:
         b7:2d:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:43 2025 by rpki-client